Exam MD-101 topic 2 question 29 discussion

Comp 1 - 3 Days Comp 2 - No Effect Policy Applies if you are in Group 1 excluding for members that are in Group 2 And the same for the other ring with Group 2 and Group 1. So both rings will not apply on Comp 2. Another way to set this up is to Include All devices and Exclude Group X, same result but maybe gives a better overview on how the include and exclude works.

Computer 2 is No Effect. Both policies exclude the other group and Computer 2 belongs to both so it is excluded by both policies.

Correct

this was a good one.

3 Days and no effect. Exclude always beats include.

Comp 1 - 3 Days Comp 2 - No Effect

I Think it is correct. 3 days in both. Computer 1 is 3 days - Group 1 - Ring 1. Computer 2 is group 1 and group 2. Ring 2 no have effect but Ring 1 (group 1), yes.

1-Computer 2 is in Group1 and Group2. 2-Ring 2 applies in Group2(include) and Group1(exclude). 3-Exclusion overrides inclusion. 4 Group1 /3 days deferral.

I had this question recently on my exam and the right answer is 3 days -- No effect. For reference, see link; https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#exclude-groups-from-a-profile-assignment "xclusion takes precedence over inclusion in the following same group type scenarios: Including user groups and excluding user groups Including device groups and excluding device group For example, you assign a device profile to the All corporate users user group, but exclude members in the Senior Management Staff user group. Since both groups are user groups, All corporate users except the Senior Management staff get the profile."

Answer is : Computer 1 - 3 days and COmputer 2 no effecr. Exlcude for groups , apps and objects always takes precedence over include . because the computer belongs to 2 groups and each policy exclude one of them , then there is no effecrt for computer 2

Has this question changed? Seems like it's 1 - No effect 2 - 10 days. Discussion talks about excluding group 2 twice, but I see group 1 being excluded twice

3 days and No Effect. If you click on 'more information about group exclusion' when configuring Ring assignment in Intune, it takes you to https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#exclude-groups-from-a-profile-assignment There it states that exclusion takes precedence over inclusion. Since Computer2 is a member of a group that is excluded in both assignments, neither are applied to Computer2. So 'No effect' for Computer2.

3 days, no effect. https://docs.microsoft.com/en-us/mem/intune/apps/apps-inc-exl-assignments Exclude, in my experience, always takes precedence over include.

Computer1 and Computer2 are members of Group1. Ring1 is applied to Group1. The term "Exclude" is misleading. It means that the ring is not applied to that group, rather than that group being blocked.

I cant find anywhere in any documentation about conflict between include and exclude . It says here that being excluded will not block it but the sources it states don't have any info on that ? Very confused on this one . Anyone got a legit source for this ?

Intune will check Exclude first, then Include. So answer will be 3 and 10.

I also believe Computer 2 is No Effect. That is the purpose of the exclusion. Apply updates to a big group then if needed exclude smaller groups or computers from it so they are not affected.